Attacks/Breaches
9/3/2013
12:52 PM
Connect Directly
RSS
E-Mail
50%
50%

30-Second HTTPS Crypto Cracking Tool Released

BREACH testing tool reveals sites susceptible to attack that recovers plaintext information from encrypted traffic.

9 Android Apps To Improve Security, Privacy
9 Android Apps To Improve Security, Privacy
(click image for larger view)
Three researchers who discovered a crypto attack that can be used to grab sensitive information from HTTPS traffic in less than 30 seconds have released a tool to help website operators see if their systems are susceptible.

Details of the BREACH -- short for Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext -- attack were first revealed last month at the Black Hat information security conference in Las Vegas by Salesforce.com lead product security engineer Angelo Prado, Square application security engineer Neal Harris, and Salesforce.com lead security engineer Yoel Gluck.

Their presentation triggered a Department of Homeland Security warning that "a sophisticated attacker may be able to derive plaintext secrets from the ciphertext in an HTTPS stream," and that all versions of the transport layer security (TLS) and secure sockets layer (SSL) protocols are vulnerable.

[ Here's what you can learn from the latest government security breach. Read Department Of Energy Cyberattack: 5 Takeaways. ]

The man-in-the-middle HTTPS crypto attack involves watching "the size of the cipher text received by the browser while triggering a number of strategically crafted requests to a target site," according to exploit details that the developers shared with DHS. "To recover a particular secret in an HTTPS response body, the attacker guesses character by character, sending a pair of requests for each guess. The correct guess will result in a smaller HTTPS response," said the DHS.

Prado has previously said that crafting a fix for HTTPS itself will be a "nontrivial" undertaking.

In the meantime, he and his fellow researchers this week released a tool for launching a BREACH attack for testing purposes. Their tool is available both in the form of source code and instructions, as well as a precompiled binary.

"This is intended for self-assessment only," according to the BREACH tool download page. "Don't do bad things."

To use the tool, "you will need a Windows computer or [virtual machine] to build and run the tool," Prado said in an email interview. Other requirements include the .NET 3.5+ Framework and Visual Studio 2010 or newer, for anyone who wants to modify the code, which is being hosted on GitHub. The tool has been tested with Windows 7.

When using the tool, no man-in-the-middle attack is required for testing a site. Instead, the developers recommended simply pointing the tool -- which emulates a Web client -- at encrypted HTTPS traffic, using a hosts file, which allows host names to be associated with IP addresses.

In addition to this "simple HTTP client that simulates browser behavior," the researchers promised they would release a more full-fledged, browser-based tool that website operators can use to test their susceptibility to a BREACH attack.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Mathew
50%
50%
Mathew,
User Rank: Apprentice
9/11/2013 | 9:28:17 AM
re: 30-Second HTTPS Crypto Cracking Tool Released
Tough to say, but when DHS issues an alert, the risk isn't zero. Likely, this vulnerability could be built on by attackers in the future, so that when paired with an intrusion, they'd be able to siphon away intercepted HTTPS data, which -- because it's being sent using HTTPS -- is more likely to contain sensitive information. So this is more like a warning of dangers to come, unless fixes get made.
David F. Carr
50%
50%
David F. Carr,
User Rank: Apprentice
9/4/2013 | 10:18:48 PM
re: 30-Second HTTPS Crypto Cracking Tool Released
So how dangerous is this really?
Mathew
50%
50%
Mathew,
User Rank: Apprentice
9/4/2013 | 10:34:46 AM
re: 30-Second HTTPS Crypto Cracking Tool Released
Excellent question, I should have referred to previous reporting that included that answer: The researchers have outlined a number of mitigation possibilities, such as separating secrets from user input, or masking secrets by making them random.

These are fixes that would likely need to be implemented by website server software developers, meaning it's not going to happen immediately, either on the development or subsequent implementation front.

One caveat with the vulnerability is that an attacker would first need to infiltrate a target network to then begin sniffing traffic.
David F. Carr
50%
50%
David F. Carr,
User Rank: Apprentice
9/3/2013 | 11:59:00 PM
re: 30-Second HTTPS Crypto Cracking Tool Released
What prevention or remediation steps are site providers supposed to take? Is it the web server that needs to be secured against attack or the applications that run on top of it?
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Cartoon
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-6306
Published: 2014-08-22
Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors.

CVE-2014-0232
Published: 2014-08-22
Multiple cross-site scripting (XSS) vulnerabilities in framework/common/webcommon/includes/messages.ftl in Apache OFBiz 11.04.01 before 11.04.05 and 12.04.01 before 12.04.04 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, which are not properly handled in a (1)...

CVE-2014-3525
Published: 2014-08-22
Unspecified vulnerability in Apache Traffic Server 4.2.1.1 and 5.x before 5.0.1 has unknown impact and attack vectors, possibly related to health checks.

CVE-2014-3563
Published: 2014-08-22
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ssh, or (3) salt-cloud.

CVE-2014-3587
Published: 2014-08-22
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists bec...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Three interviews on critical embedded systems and security, recorded at Black Hat 2014 in Las Vegas.